Ukukhutshwa kweChrome 98

I-Google ibonise ukukhululwa kwesiphequluli sewebhu se-Chrome 98. Ngexesha elifanayo, ukukhululwa okuzinzile kweprojekthi yeChromium yamahhala, esebenza njengesiseko seChrome, iyafumaneka. Umkhangeli weChrome wahlulwa ngokusetyenziswa kweempawu zikaGoogle, ubukho benkqubo yokuthumela izaziso xa kukho ingozi, iimodyuli zokudlala umxholo wevidiyo okhuselweyo wekopi (DRM), inkqubo yokufaka uhlaziyo ngokuzenzekelayo, kunye nokuhambisa iiparamitha zeRLZ xa ukukhangela. Ukukhutshwa okulandelayo kweChrome 99 kucwangciselwe umhla woku-1 kuMatshi.

Utshintsho oluphambili kwiChrome 98:

• Isikhangeli sinogcino lwaso lwezatifikethi zeengcambu zezatifikethi zabasemagunyeni (Chrome Root Store), eza kusetyenziswa endaweni yeevenkile zangaphandle ezikhethekileyo kwinkqubo nganye yokusebenza. Ivenkile iphunyezwe ngokufanayo kwivenkile ezimeleyo yezatifikethi zengcambu kwiFirefox, esetyenziswa njengekhonkco lokuqala ukujonga ikhonkco lesiqinisekiso xa uvula iisayithi ngaphezulu kweHTTPS. Ugcino olutsha alukasetyenziswa ngokuzenzekelayo. Ukunciphisa utshintsho lwenkqubo yokugcina ulungelelwaniso kunye nokuqinisekisa ukuphatheka, kuya kubakho ixesha lokutshintsha apho i-Chrome Root Store iya kubandakanya ukhetho olupheleleyo lwezatifikethi ezivunyiweyo kwiiplatifti ezininzi ezixhaswayo.
• Isicwangciso sokuqinisa ukukhuselwa ekuhlaselweni okuhambelana nokufikelela kwizibonelelo kwinethiwekhi yendawo okanye kwikhompyutheni yomsebenzisi (indawo yendawo) ukusuka kwizikripthi ezilayishiwe xa isiza sivulwa siyaqhubeka kuphunyezwa. Ezo zicelo zisetyenziswa ngabahlaseli ukwenza uhlaselo lwe-CSRF kwiirutha, iindawo zofikelelo, abashicileli, ujongano lwewebhu loshishino kunye nezinye izixhobo kunye neenkonzo ezamnkela izicelo ezisuka kwinethiwekhi yendawo kuphela.

  Ukukhusela kuhlaselo olulolo hlobo, ukuba naziphi na izixhobo ezingaphantsi zifikelelwe kuthungelwano lwangaphakathi, isikhangeli siya kuqalisa ukuthumela isicelo esicacileyo semvume yokukhuphela ezo zixhobo zingaphantsi. Isicelo seemvume senziwa ngokuthumela isicelo se-CORS (i-Cross-Origin Resource Sharing) kunye nesihloko esithi "Ukufikelela-Ukulawula-Isicelo-Inethiwekhi yabucala: yinyaniso" kumncedisi wesayithi oyintloko ngaphambi kokufikelela kwinethiwekhi yangaphakathi okanye i-localhost. Xa uqinisekisa umsebenzi ekuphenduleni kwesi sicelo, umncedisi kufuneka abuyisele "Ukufikelela-Ukulawula-Vumela-Inethiwekhi-yaBucala: yinyaniso" okubhalwe ngasentla. Kwi-Chrome 98, isheke siphunyezwa kwimodi yokuvavanya kwaye ukuba akukho siqinisekiso, isilumkiso siboniswa kwikhonsoli yewebhu, kodwa isicelo somthombo ongaphantsi ngokwawo asivaliwe. Ukuvala akucwangciswanga ukuba kunikwe amandla de iChrome 101 ikhutshwe.

• Iisetingi zeakhawunti zidibanisa izixhobo zokulawula ukubandakanywa koPhendlo oluKhuselekileyo oluKhuselekileyo, oluvula iitshekhi ezongezelelweyo ukukhusela ngokuchasene nenkohliso, umsebenzi onobungozi kunye nezinye izoyikiso kwiWebhu. Xa uvula imowudi kwiakhawunti yakho kaGoogle, ngoku uya kucelwa ukuba uvule imowudi kwiChrome.
• Yongeza imodeli yokukhangela iinzame zokukhohlisa kwicala lomxhasi, iphunyezwe kusetyenziswa iqonga lokufunda lomatshini le-TFLite (TensorFlow Lite) kwaye ayifuni ukuthumela idatha ukwenza ungqinisiso kwicala likaGoogle (kule meko, i-telemetry ithunyelwa ngolwazi malunga noguqulelo lwemodeli. kunye nobunzima obaliweyo kudidi ngalunye) . Ukuba umzamo wokukhwabanisa ufunyenwe, umsebenzisi uya kuboniswa iphepha lesilumkiso phambi kokuvula indawo ekrokrisayo.
• Kwi-API yeeNgcebiso zabaThengi, ephuhliswayo njengokutshintshwa kwesihloko soMsebenzisi-Agent kwaye ikuvumela ukuba ukhethe ngokukhetha idatha malunga nesikhangeli esithile kunye neeparameters zenkqubo (uguqulelo, iqonga, njl.) kuphela emva kwesicelo somncedisi, oko kunokwenzeka ukufaka endaweni yamagama angeyonyani kuluhlu lwezichongi zebrawuza, ngokuhambelana ne-GREASE (Yenza Izandiso eziNgaQongayo kunye noKugcina Ukwandiswa) indlela esetyenziswa kwi-TLS. Umzekelo, ukongeza kwi "Chrome"; v = "98"' kunye ne'"Chromium"; v="98″' isichongi esingakhethiyo somkhangeli zincwadi ongekhoyo '"(Ayikho; Umkhangeli"; v="12″' ungongezwa kuluhlu. Utshintshiselwano olunjalo luya kunceda ukuchonga iingxaki ngokuchongwa kwemisebenzi yezikhangeli ezingaziwayo, nto leyo ekhokelela kwinto yokuba ezinye izikhangeli zinyanzelwa ukuba zizenze ezinye iibhrawuza ezidumileyo ukuba zidlule ukukhangela ngokuchasene noluhlu lwabakhangeli abamkelekileyo.
• Ukuqala nge-17 kaJanuwari, iVenkile yeWebhu yeChrome ayisazamkeli izongezo ezisebenzisa inguqulelo 2023 ye-Chrome manifest. Ukongezwa okutsha ngoku kuya kwamkelwa kuphela ngoguqulelo lwesithathu lwe-manifest. Abaphuhlisi bezongezo ezongeziweyo ngaphambili basazokwazi ukupapasha uhlaziyo ngoguqulelo lwesibini lwe-manifest. Ukuyekwa ngokupheleleyo kwenguqulelo yesibini yomqulu wezithembiso kucwangciswe ngoJanuwari XNUMX.
• Inkxaso eyongeziweyo yeefonti zevector yombala kwi-COLRv1 ifomathi (i-subset yeefonti ze-OpenType eziqulathe, ukongeza kwi-glyphs ye-vector, umaleko onolwazi lombala), onokusetyenziswa, umzekelo, ukwenza i-emoji ye-multicolor. Ngokungafaniyo nefomathi ye-COLRv0 ebikade ixhaswa, i-COLRv1 ngoku iyakwazi ukusebenzisa i-gradient, ii-overlays, kunye notshintsho. Ifomathi inikezela ngefom yokugcina i-compact, inikezela ngoxinzelelo olusebenzayo, kwaye ivumela ukusetyenziswa kwakhona kwamagqabantshintshi, okuvumela ukucuthwa okubonakalayo kubukhulu befonti. Umzekelo, ifonti ye-Noto Color Emoji ithatha i-9MB kwifomathi ye-raster, kunye ne-1MB kwi-COLRv1.85 ifomathi ye-vector.
• Imowudi yovavanyo lwemvelaphi (iimpawu zovavanyo ezifuna ukusebenza ngokwahlukileyo) zisebenzisa i-Regional Capture API, ekuvumela ukuba unqande ividiyo efakiweyo. Umzekelo, ukunqampuna kunokufuneka kwiinkqubo zewebhu ezithatha ividiyo kunye nemixholo yethebhu yazo, ukusika umxholo othile ngaphambi kokuthumela. Uvavanyo lwemvelaphi luthetha ukukwazi ukusebenza kunye ne-API echaziweyo kwizicelo ezikhutshelwe kwi-localhost okanye i-127.0.0.1, okanye emva kokubhalisa kunye nokufumana ithokheni ekhethekileyo esebenzayo ixesha elilinganiselweyo kwindawo ethile.
• Ipropathi yeCSS "contain-intrinsic-size" ngoku ixhasa ixabiso elithi "auto", eya kusebenzisa ubungakanani bokugqibela obukhunjulwayo (xa isetyenziswe no "content-visibility: auto", umphuhlisi akafuneki aqikelele ubungakanani be element) .
• Yongezwe ipropathi ye-AudioContext.outputLatency, apho ungafumana khona ulwazi malunga nokulibaziseka okuqikelelweyo phambi kokuphuma komsindo (ulibaziseko phakathi kwesicelo somsindo kunye nokuqala kokucubungula idatha efunyenweyo ngesixhobo sokukhupha umsindo).
• Ipropathi yepropathi yeCSS, eyenza kube nokwenzeka ukumisela ukuba zeziphi izikimu zombala into enokuthi iboniswe ngokuchanekileyo ("ukukhanya", "mnyama", "imowudi yemini" kunye "nemowudi yasebusuku"), iparamitha "kuphela" yongeziwe. ukuthintela ukunyanzeliswa kokutshintsha kombala kwi-schemas zomntu ngamnye we-HTML. Umzekelo, ukuba ukhankanya "i-div {isicwangciso sombala: ukukhanya kuphela}", ngoko ngumxholo wokukhanya kuphela oza kusetyenziswa kwi-elementi ye-div, nokuba isikhangeli sinyanzela umxholo omnyama ukuba usebenze.
• Inkxaso eyongeziweyo 'ye-dynamic-uluhlu' kunye 'nevidiyo-dynamic-uluhlu' lwemibuzo yemidiya kwi-CSS ukumisela ukuba ingaba isikrini siyayixhasa na i-HDR (Uluhlu oluPhezulu lweDynamic).
• Kongezwe ukukwazi ukukhetha ukuba uvule ikhonkco kwisithuba esitsha, ifestile entsha, okanye ifestile ezivelelayo kwiwindow.open() umsebenzi. Ukongeza, ipropathi yefestile.statusbar.visible ngoku ibuyisela "ubuxoki" kwii-popups kunye "nenyani" yeethebhu kunye neefestile. const popup = window.vula('_blank',",'popup=1′); // Vula isithuba sefestile ezivelelayo const = window.vula('_blank',,"'popup=0′); // Vula kwithebhu
• I-structuredClone () indlela iphunyeziwe kwiifestile kunye nabasebenzi, ekuvumela ukuba wenze iikopi eziphindaphindiweyo zezinto ezibandakanya iipropati kungekhona kuphela into echaziweyo, kodwa nazo zonke ezinye izinto ezichazwe yinto yangoku.
• I-API ye-Web Authentication yongeze inkxaso ye-FIDO CTAP2 yolwandiso lwenkcazo, ekuvumela ukuba usete ubuncinci obuvumelekileyo bekhowudi ye-PIN (minPinLength).
• Kwizicelo zewebhu ezifakiweyo ezizimeleyo, icandelo leWindow Controls Overlay yongeziweyo, eyandisa indawo yesikrini yesicelo kuyo yonke ifestile, kubandakanywa indawo yesihloko, apho amaqhosha olawulo efestile asezantsi (vala, nciphisa, khulisa). ) zibekwe phezulu. Usetyenziso lweWebhu lunokulawula unikezelo kunye noqhubekeko lwegalelo lwefestile iyonke, ngaphandle kwebhloko eyalekeneyo enamaqhosha olawulo efestile.
• Yongeza ipropathi yokuphatha umqondiso kwi-WritableStreamDefaultController ebuyisela into ye-AbortSignal, enokusetyenziswa ukumisa ngokukhawuleza ukubhala kwi-WritableStream ngaphandle kokulinda ukuba bagqibe.
• I-WebRTC isuse inkxaso yesivumelwano esingundoqo se-SDES, esachithwa yi-IETF ngo-2013 ngenxa yeenkxalabo zokhuseleko.
• Ngokungagqibekanga, i-U2F (Cryptotoken) API ikhubaziwe, ebikade ihoxisiwe kwaye yatshintshwa yiWeb Authentication API. I-U2F API iya kususwa ngokupheleleyo kwiChrome 104.
• Kwi-API Directory, i-install_browser_version field iye yachithwa, yatshintshwa yi-pending_browser_version field entsha, eyahluke ngokuba iqulethe ulwazi malunga noguqulelo lwesikhangeli, kuthathelwa ingqalelo uhlaziyo olukhutshelweyo kodwa olungasetyenziswanga (okt, inguqulelo eya kusebenza emva isikhangeli siqaliswe kwakhona).
• Iinketho ezisusiweyo ezivumele ukubuyisela inkxaso ye-TLS 1.0 kunye ne-1.1.
• Uphuculo lwenziwe kwizixhobo zabaphuhlisi bewebhu. Ithebhu yongezwe ukuvavanya ukusebenza kwe-Cache yokubuyela umva, ebonelela ngolawulo olukhawulezileyo xa usebenzisa amaqhosha athi Buyela naPhambili. Kongezwe ukukwazi ukulinganisa izicelo zemidiya ezinyanzelekileyo. Amaqhosha ongeziweyo kumhleli weFlexbox ukuxhasa umqolo-umva kunye neempawu zekholamu-umva. Ithebhu ethi "Utshintsho" iqinisekisa ukuba utshintsho luboniswa emva kokufomatha ikhowudi, eyenza lula ukucalulwa kwamaphepha ancitshiweyo.

  Ukuphunyezwa kwephaneli yokuphonononga ikhowudi iye yahlaziywa ukukhutshwa komhleli wekhowudi ye-CodeMirror 6, ephucula kakhulu ukusebenza kokusebenza kunye neefayile ezinkulu kakhulu (WASM, JavaScript), isombulula iingxaki nge-random offsets ngexesha lokuhamba, kunye nokuphucula iingcebiso inkqubo yokugqibezela xa uhlela ikhowudi. Ukukwazi ukuhluza imveliso ngegama lepropati okanye ixabiso longezwe kwiqela lenjongo leempawu zeCSS.

  

Ukongeza kwizinto ezintsha kunye nokulungiswa kwe-bug, inguqulelo entsha isusa ubuthathaka obungama-27. Uninzi lobuthathaka luchongiwe ngenxa yovavanyo oluzenzekelayo kusetyenziswa idilesi yeSanitizer, MemorySanitizer, Control Flow Integrity, LibFuzzer kunye nezixhobo zeAFL. Akukho zingxaki zibalulekileyo zichongiwe eziya kuvumela umntu ukuba adlule kuwo onke amanqanaba okhuseleko lomkhangeli zincwadi kwaye enze ikhowudi kwisistim ngaphandle kwendawo yebhokisi yesanti. Njengenxalenye yenkqubo yemali yokuvuza ukufumanisa ubuthathaka ekukhutshweni kwangoku, uGoogle uhlawule iimbasa ezili-19 ezixabisa i-88 lamawaka eerandi (amabhaso amabini angama-20000, ibhaso elinye le-12000 yeedola, iimbasa ezimbini zeedola ezingama-7500, amabhaso amane e-1000 yeedola kunye nelinye i-$7000, i-$5000 kunye ne-$3000 yeedola.

umthombo: opennet.ru